[JIRA] Commented: (SSPCPP-378) Request for customisation of certificate name at install-time

[Rod Widdowson (JIRA)]

    [ https://issues.shibboleth.net/jira/browse/SSPCPP-378?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14100#comment-14100 ] 

Rod Widdowson commented on SSPCPP-378:
--------------------------------------

Is there a need for this outside windows?

I could see that we could have an [Advanced...] button which requests all the other stuff that keygen needs and if it pressed call keygen.bat with parameters.  Issues I see are:

- If keygen fails then the install will fail.
- Do we want to do this in any case except the first ever install (I would say no)
- Is it just FQDN and entityID?
- Do we want this for 2.5?  I'm assuming so, but also not that we don't want it as much as we do having a working installer.

> Request for customisation of certificate name at install-time
> -------------------------------------------------------------
>
>                 Key: SSPCPP-378
>                 URL: https://issues.shibboleth.net/jira/browse/SSPCPP-378
>             Project: Shibboleth SP - C++
>          Issue Type: Sub-task
>          Components: Installation / Packaging
>    Affects Versions: 2.4.2
>         Environment: Windows Server 2003, Windows Server 2008, Windows Server 2008R2
>            Reporter: 2hdjd+n3ax0o7ymuettgwna8+hk=@https://registry.shibboleth.ox.ac.uk/idp
>            Assignee: Scott Cantor
>            Priority: Minor
>             Fix For: 2.5
>
>   Original Estimate: 1 day
>  Remaining Estimate: 1 day
>
> When installing the Shibboleth SP software on a Windows Server machine the MSI installer appears to use the host name when generating the self-signed certificate.
> It would be nice to to be able to provide an alternative name for the self-signed certificate's Issuer, Subject, and Subject Alternative Name fields at installation time. In this way the user installing the SP could use a service name consistently for the entity Id, the address for the service, and in the certificate.
> As a member of an IdP-running team that needs to track down issues quickly, it helps us to guide SP installers to use consistent names.
> Thanks for considering this.

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira